Skip to content

Add compatibility for NIC names with dashes#2370

Open
seunghun1ee wants to merge 2 commits into
stackhpc/2025.1from
vault-bao-nic-name-fix
Open

Add compatibility for NIC names with dashes#2370
seunghun1ee wants to merge 2 commits into
stackhpc/2025.1from
vault-bao-nic-name-fix

Conversation

@seunghun1ee

Copy link
Copy Markdown
Member

When Ansible gathers facts, it silently converts dashes in network interface names into underscores, resulting precheck failure on Vault to OpenBao migration for overcloud.

Fixed with adding replace() filter when getting secret_store_bind_interface.

@seunghun1ee seunghun1ee self-assigned this Jun 15, 2026
@github-actions github-actions Bot added the waiting-review PR is waiting for a review label Jun 15, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the secret_store_bind_interface variable in vault-bao-migration-overcloud.yml to replace hyphens with underscores. The reviewer noted that this same variable is defined later in the file (on line 42) for an imported playbook, and recommended applying the same filter there to prevent the second play from failing.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

Comment thread etc/kayobe/ansible/secret-store/vault-bao-migration-overcloud.yml Outdated
When Ansible gathers facts, it silently converts dashes in network
interface names into underscores, resulting precheck failure on Vault to
OpenBao migration for overcloud.

Fixed with adding ``replace()`` filter when getting
``secret_store_bind_interface``.
@seunghun1ee

Copy link
Copy Markdown
Member Author

Tested on multinode with custom interface names with dashes

@seunghun1ee seunghun1ee marked this pull request as ready for review June 15, 2026 10:40
@seunghun1ee seunghun1ee requested a review from a team as a code owner June 15, 2026 10:40

@Alex-Welsh Alex-Welsh left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry to scope-creep this a bit, but should we also do the same for other secret-store/* playbooks?

@seunghun1ee

Copy link
Copy Markdown
Member Author

Not really. The equivalent variable only appears in secret-store-deploy-overcloud.yml. But the way it gets the ip address from the chosen network interface is different. The deployment playbook uses net_ip filter whereas the migration playbook uses attributes from ansible_facts.

I can't remember the background of this difference. Maybe because net_ip filter is known that it can fail and we wanted to move away from it?

Comment thread etc/kayobe/ansible/secret-store/vault-bao-migration-overcloud.yml Outdated
These vars are only used for stackhpc.hashicorp.vault_bao_migration
playbook and not needed for the previous tasks.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

waiting-review PR is waiting for a review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants